review Brace to see if there are security settings which aren't part of security-misc (or Kicksecure yet) #278

Activity

1. raja-grewal commented on Nov 8, 2024

   

   raja-grewal

   on Nov 8, 2024

   Contributor

   More actions

   Having looked through the setting that I am familiar with such as the boot parameters andsysctl, besides the PR above, there does not seem to be much actionable that we have not either already implemented, or implemented to a stricter level.

   While there are some novel network-related sysctl that could be included, at this time I have not done enough due diligence to suggest them.

   Boot parameters:
   https://github.com/divestedcg/Brace/blob/master/brace/etc/default/grub.d/brace.cfg

   sysctl:
   https://github.com/divestedcg/Brace/blob/master/brace/usr/lib/sysctl.d/60-restrict.conf
2. adrelanos commented on May 1, 2026

   

   adrelanos

   on May 1, 2026

   ContributorAuthor

   More actions

   Forum discussion:
   https://forums.kicksecure.com/t/what-can-we-import-to-security-misc-from-brace/1707